Felix Fietkau <nbd@xxxxxxxx> wrote: > Apparently hardware does not perform CCMP PN validation in hardware, so > we need to take care of this in the driver. This is important for > protecting against replay attacks. > > Since validation of fragmented frames is more complex, the CCMP header > for those is preserved. To keep the counter in sync, the first fragment > is verified by both mt76 and mac80211, and all other fragments only by > mac80211. > > Signed-off-by: Felix Fietkau <nbd@xxxxxxxx> Patch applied to wireless-drivers-next.git, thanks. 30ce7f4456ae mt76: validate rx CCMP PN -- https://patchwork.kernel.org/patch/10183891/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
